CVE-2006-2415

MEDIO 5.8CVE-2006-2415 · Published 16/05/2006 · updated 16/06/2026

In breve

CVE-2006-2415 è una vulnerabilità MEDIO (CVSS 5.8) che riguarda flexchat (flexchat).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
flexchat flexchat	`≤ 2.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlexChat 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) CFTOKEN parameter in (a) index.cfm and (3) CFTOKEN and (4) CFID parameter in (b) chat.cfm.

References

pridels0.blogspot.com/2006/05/flexchat-xss.html
secunia.com/advisories/20101 · Vendor Advisory
securitytracker.com/id
osvdb.org/25504
osvdb.org/25505
vupen.com/english/advisories/2006/1804
exchange.xforce.ibmcloud.com/vulnerabilities/26429

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free